$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS145676.roa File: AS145676.roa (raw, json) Hash identifier: 5t3tYS0SOSZTfNu/5htpYiW4c3+Km8ra83yZmZXz5uA= Subject key identifier: F4:A7:21:11:E5:3E:32:90:8B:2F:37:52:F2:EE:D5:7B:42:C8:35:00 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 06C470918E6602E4B0BB800D9CEDB853B1333A09 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS145676.roa Signing time: Wed 04 Mar 2026 06:30:01 +0000 ROA not before: Wed 04 Mar 2026 06:25:01 +0000 ROA not after: Wed 03 Mar 2027 06:30:01 +0000 asID: 145676 IP address blocks: 240a:abd2::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:c4:70:91:8e:66:02:e4:b0:bb:80:0d:9c:ed:b8:53:b1:33:3a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:25:01 2026 GMT Not After : Mar 3 06:30:01 2027 GMT Subject: CN=F4A72111E53E32908B2F3752F2EED57B42C83500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:17:7a:c9:3e:96:e0:62:ea:c9:a9:74:cd: 8d:52:84:53:9b:56:30:d6:18:97:c0:8b:10:45:f7: 2f:02:5e:31:f1:a7:0f:25:7c:e3:5a:05:b9:55:27: 49:f1:9a:79:b2:97:50:e4:98:80:ba:d2:86:2c:cf: 4d:a7:be:89:c7:11:67:4a:0f:c0:b7:8e:72:1a:73: 68:85:94:8a:ba:b9:94:d0:e4:5f:97:14:b9:16:4e: 57:e5:5d:6e:09:84:4e:cf:af:09:58:27:8b:24:5c: 3b:71:a8:5d:21:2c:1a:01:7b:0f:09:2e:fc:d0:23: 4a:25:20:00:ea:21:44:18:dd:5c:98:57:dc:3c:76: a8:71:0d:8a:0f:4f:e9:44:62:1f:33:74:69:e4:53: ed:c5:fc:08:53:06:6d:3d:12:4a:15:86:82:5d:a7: a1:79:92:a8:8b:c3:d8:8c:b7:d9:4c:83:79:b9:d6: cd:ec:be:75:90:81:2a:76:96:66:0e:cc:da:f3:64: 89:65:49:ae:64:d1:a1:1b:40:cd:d1:28:f4:46:c2: 24:9b:18:94:2e:15:5d:6d:ee:7e:5b:1d:c3:b6:ed: 4a:60:ed:9d:ed:8e:66:e6:85:e8:12:0b:a9:0d:25: ad:f3:a5:68:28:13:58:0f:84:e8:de:cc:1a:7c:64: 63:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A7:21:11:E5:3E:32:90:8B:2F:37:52:F2:EE:D5:7B:42:C8:35:00 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS145676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:abd2::/32 Signature Algorithm: sha256WithRSAEncryption c6:c2:80:d3:20:43:bd:ce:b8:7f:ad:8e:a0:ff:9b:d2:34:99: ab:e5:25:b8:f3:f4:d5:0a:10:96:b5:d4:b1:81:a8:0e:3c:63: b2:f5:42:61:6a:0a:bb:a5:31:42:5c:b9:00:a3:4b:e0:b3:30: 24:b9:c7:fe:1c:54:1c:15:80:a1:ba:8f:9c:d2:7a:2e:6b:58: db:de:4b:04:4a:07:cb:ce:13:87:12:56:c1:19:02:b7:3a:b2: bf:79:77:0d:f0:72:4d:c3:1f:d2:ae:38:48:2a:05:8e:36:71: 1a:72:93:16:af:eb:89:8f:9d:cb:b7:43:1d:86:e6:80:a2:67: e0:73:5d:26:2a:d3:12:52:94:79:a8:67:50:e1:9d:bd:bc:f6: 69:c7:59:03:77:75:6c:ec:b6:4f:14:e1:85:26:97:fd:57:28: 50:14:48:41:b5:1e:54:5e:2b:72:aa:20:7b:e8:81:c9:45:b0: fa:0a:d6:2a:d6:7d:5c:d5:e4:dc:68:a7:e3:7b:1e:33:f7:3f: 8f:9b:8d:3a:a1:a9:e1:89:33:3e:f4:dd:d5:6e:9a:93:24:3b: 2f:d9:a8:e7:b0:7a:9d:a1:1a:7b:4c:41:24:cf:cc:17:f0:ed: 8f:9a:04:8f:e1:13:5d:ae:89:67:ff:94:5c:a8:4a:2d:49:a1: 68:87:8f:de -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUBsRwkY5mAuSwu4ANnO24U7EzOgkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MjUwMVoX DTI3MDMwMzA2MzAwMVowMzExMC8GA1UEAxMoRjRBNzIxMTFFNTNFMzI5MDhCMkYz NzUyRjJFRUQ1N0I0MkM4MzUwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKUjF3rJPpbgYurJqXTNjVKEU5tWMNYYl8CLEEX3LwJeMfGnDyV841oFuVUn SfGaebKXUOSYgLrShizPTae+iccRZ0oPwLeOchpzaIWUirq5lNDkX5cUuRZOV+Vd bgmETs+vCVgniyRcO3GoXSEsGgF7Dwku/NAjSiUgAOohRBjdXJhX3Dx2qHENig9P 6URiHzN0aeRT7cX8CFMGbT0SShWGgl2noXmSqIvD2Iy32UyDebnWzey+dZCBKnaW Zg7M2vNkiWVJrmTRoRtAzdEo9EbCJJsYlC4VXW3uflsdw7btSmDtne2OZuaF6BIL qQ0lrfOlaCgTWA+E6N7MGnxkY7ECAwEAAaOCAcUwggHBMB0GA1UdDgQWBBT0pyER 5T4ykIsvN1Ly7tV7Qsg1ADAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NTY3Ni5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK q9IwDQYJKoZIhvcNAQELBQADggEBAMbCgNMgQ73OuH+tjqD/m9I0mavlJbjz9NUK EJa11LGBqA48Y7L1QmFqCrulMUJcuQCjS+CzMCS5x/4cVBwVgKG6j5zSei5rWNve SwRKB8vOE4cSVsEZArc6sr95dw3wck3DH9KuOEgqBY42cRpykxav64mPncu3Qx2G 5oCiZ+BzXSYq0xJSlHmoZ1Dhnb289mnHWQN3dWzstk8U4YUml/1XKFAUSEG1HlRe K3KqIHvogclFsPoK1irWfVzV5Nxop+N7HjP3P4+bjTqhqeGJMz703dVumpMkOy/Z qOewep2hGntMQSTPzBfw7Y+aBI/hE12uiWf/lFyoSi1JoWiHj94= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:28 2026 by rpki-client